Category: Technologies - Saravanan Blog

Building a Defense‑in‑Depth Auth Strategy for Public Content APIs (REST)

Leave a Comment / Technologies / inisaravanan@gmail.com

Java/Spring backend • AWS CloudFront • Apigee X • RS256 JWT with JWKS (Apigee KVM) • Optional API Keys for Partners • Explicit Origin Allowlist via CloudFront Functions TL;DR Table of Contents Why “auth” for public content APIs? “Public” does not mean “unprotected.” Ratings, reviews, and Q&A endpoints attract scraping, cloning, and sudden bursts that […]

Building a Defense‑in‑Depth Auth Strategy for Public Content APIs (REST) Read More »

The Architectural Crossroads: Four Patterns for Real-Time Scale

When designing a system to manage millions of stateful entities, you’ll find yourself at a crossroads with four primary paths to choose from. 1. The Stateful Stream Processor (Partitioned Kafka Consumers) This is often the first stop on the journey to a truly scalable system. It’s a powerful, “roll your own” approach that leverages the